Overview

overview

9

Static

static

1

dridex

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1416248e000b693192f5664eb083e6bdcf63395dc06d7de8919f7849f3917850

  • Size

    3.4MB

  • Sample

    230326-sgvhxagh76

  • MD5

    84c227e60924c9391b72c7dc88777255

  • SHA1

    9e2d04f661332204f7d34e2ceee6b49e37cccac7

  • SHA256

    1416248e000b693192f5664eb083e6bdcf63395dc06d7de8919f7849f3917850

  • SHA512

    c915452a9c9cafe64db00231876e5141c7aab056e08095fd4af6fe0d27ab74650ec5c3c7ab197db1d0f946e0e3035bcecf73ed8cd2072a8cf170351e9ad3cc4e

  • SSDEEP

    49152:w/c+EciXT1SMTEGUlayCd1XlOrUcwFY92eg6zBCYUFQumEeBAoCuYXMYo3js:PcmEZlaPfUwbYIelzBLU3vqCRs

Score
9/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      1416248e000b693192f5664eb083e6bdcf63395dc06d7de8919f7849f3917850

    • Size

      3.4MB

    • MD5

      84c227e60924c9391b72c7dc88777255

    • SHA1

      9e2d04f661332204f7d34e2ceee6b49e37cccac7

    • SHA256

      1416248e000b693192f5664eb083e6bdcf63395dc06d7de8919f7849f3917850

    • SHA512

      c915452a9c9cafe64db00231876e5141c7aab056e08095fd4af6fe0d27ab74650ec5c3c7ab197db1d0f946e0e3035bcecf73ed8cd2072a8cf170351e9ad3cc4e

    • SSDEEP

      49152:w/c+EciXT1SMTEGUlayCd1XlOrUcwFY92eg6zBCYUFQumEeBAoCuYXMYo3js:PcmEZlaPfUwbYIelzBLU3vqCRs

    Score
    9/10
    discoveryevasiontrojanupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Modifies file permissions

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks